Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/69c67b71-5974-37b9-bc53-30d3e8af8ead.roa
File:                     69c67b71-5974-37b9-bc53-30d3e8af8ead.roa (raw, json)
Hash identifier:          DxZzUh5K7CovIjgExTN6d4sfY3vwhZS6WCiuJSfGweM=
Subject key identifier:   06:42:B4:ED:3C:87:4C:70:E1:CB:CF:91:1F:20:08:10:12:8A:6B:AC
Certificate issuer:       /CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51
Certificate serial:       010D0C9F4328584DC135E9B0CC06E670971D6040
Authority key identifier: B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/69c67b71-5974-37b9-bc53-30d3e8af8ead.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     31116
IP address blocks:        195.85.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:e9:b0:cc:06:e6:70:97:1d:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=952c8dab-fc5d-4888-bc3d-1b0ee3b42884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:ea:e5:2d:f0:03:f7:e8:59:57:80:c6:0a:
                    a1:8f:37:40:5a:0c:7c:9f:40:5d:24:27:2b:a0:c7:
                    27:8c:01:2c:6e:ac:c7:00:60:5c:b1:2c:c1:b6:a2:
                    8d:a6:fb:c6:03:65:af:20:20:e2:9a:28:cc:bc:cc:
                    80:1a:3b:b4:6a:74:77:06:2c:fc:ae:5e:29:36:2b:
                    06:ee:69:06:54:71:5e:5d:06:9c:36:e9:d6:a9:cb:
                    53:44:11:2f:0b:39:77:6e:96:16:03:76:54:99:1f:
                    cd:a9:42:9d:34:69:54:bd:e9:ac:fc:86:ce:ff:23:
                    59:61:4d:2e:0e:47:f9:e0:6f:f1:18:86:45:db:cc:
                    96:28:65:6f:02:9b:74:23:49:1f:60:63:41:51:9f:
                    6c:14:ad:09:96:49:fe:90:2d:94:83:8d:e0:02:40:
                    79:15:eb:35:ee:ff:64:fc:6a:7f:3c:32:fb:a8:c1:
                    3e:6d:62:b3:cb:26:5d:15:42:78:79:6b:ab:08:13:
                    31:73:dd:eb:2c:2e:f1:86:d2:5c:79:72:4c:8e:66:
                    4d:04:09:71:03:c7:55:15:ca:01:00:27:79:29:07:
                    27:86:5b:7f:e4:6c:be:de:1c:25:41:a3:ae:44:3a:
                    1f:ed:4a:85:6a:b7:98:c4:31:21:1f:0e:c3:c5:e7:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:42:B4:ED:3C:87:4C:70:E1:CB:CF:91:1F:20:08:10:12:8A:6B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/69c67b71-5974-37b9-bc53-30d3e8af8ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.crl

            X509v3 Authority Key Identifier:
                keyid:B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:00:4f:28:1f:48:bc:19:59:c8:e8:18:78:09:54:51:ca:fa:
         65:50:03:e5:c8:c2:bd:06:18:e0:3c:9f:32:f0:11:f9:dd:b4:
         a2:47:2c:b5:1b:62:9d:64:65:d5:32:a0:17:61:6f:78:84:1c:
         4e:93:e3:0c:0e:26:25:6e:a7:df:e0:53:41:3e:d7:a0:97:76:
         4a:9f:04:96:18:2a:46:49:fa:05:49:af:3a:3c:b5:c5:87:81:
         0d:85:3e:e6:33:95:42:d9:ae:0b:a4:f1:e0:7f:60:42:16:2f:
         b3:5d:c5:87:ad:9f:b3:06:52:e6:57:c8:57:52:c0:94:61:c9:
         84:8e:48:72:5f:2d:ab:9e:c9:ef:31:dc:76:8f:5b:9a:07:45:
         0c:d6:db:f8:69:7b:6e:ff:d7:47:c0:09:69:2a:8d:79:75:0b:
         4d:e7:c9:bf:59:06:73:4f:b5:e1:42:71:5b:fc:57:1e:a4:8a:
         bf:71:1e:3c:01:f2:70:36:39:b9:0c:fd:44:40:93:4b:55:fe:
         56:42:2c:8e:ef:8c:77:7d:38:d6:b2:35:c1:bb:ea:50:7d:b3:
         44:c3:70:b0:b4:3b:9c:46:6b:b5:7a:de:b9:7c:3b:b1:4c:8a:
         af:ac:06:47:04:a9:db:64:a5:10:b6:63:42:d4:74:58:fc:cb:
         8c:36:c4:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNemwzAbmcJcdYEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRkODZiMjQtZjliNi00ZDMxLWIxMGItYTNjMjI2NGUy
YjUxMB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk
OTUyYzhkYWItZmM1ZC00ODg4LWJjM2QtMWIwZWUzYjQyODg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubTq5S3wA/foWVeAxgqhjzdAWgx8n0BdJCcr
oMcnjAEsbqzHAGBcsSzBtqKNpvvGA2WvICDimijMvMyAGju0anR3Biz8rl4pNisG
7mkGVHFeXQacNunWqctTRBEvCzl3bpYWA3ZUmR/NqUKdNGlUvems/IbO/yNZYU0u
Dkf54G/xGIZF28yWKGVvApt0I0kfYGNBUZ9sFK0Jlkn+kC2Ug43gAkB5Fes17v9k
/Gp/PDL7qME+bWKzyyZdFUJ4eWurCBMxc93rLC7xhtJceXJMjmZNBAlxA8dVFcoB
ACd5KQcnhlt/5Gy+3hwlQaOuRDof7UqFareYxDEhHw7DxeeZQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZCtO08h0xw4cvPkR8gCBASimusMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wZGQ4
NmIyNC1mOWI2LTRkMzEtYjEwYi1hM2MyMjY0ZTJiNTEvNjljNjdiNzEtNTk3NC0z
N2I5LWJjNTMtMzBkM2U4YWY4ZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGRkODZiMjQtZjliNi00ZDMxLWIx
MGItYTNjMjI2NGUyYjUxLzBkZDg2YjI0LWY5YjYtNGQzMS1iMTBiLWEzYzIyNjRl
MmI1MS5jcmwwHwYDVR0jBBgwFoAUsbFajTey4seWzS+E26mJte6nj14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8wZGQ4NmIyNC1mOWI2LTRkMzEtYjEwYi1hM2My
MjY0ZTJiNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQATygfSLwZWcjoGHgJVFHK+mVQA+XIwr0GGOA8nzLwEfndtKJHLLUb
Yp1kZdUyoBdhb3iEHE6T4wwOJiVup9/gU0E+16CXdkqfBJYYKkZJ+gVJrzo8tcWH
gQ2FPuYzlULZrguk8eB/YEIWL7NdxYetn7MGUuZXyFdSwJRhyYSOSHJfLaueye8x
3HaPW5oHRQzW2/hpe27/10fACWkqjXl1C03nyb9ZBnNPteFCcVv8Vx6kir9xHjwB
8nA2ObkM/URAk0tV/lZCLI7vjHd9ONayNcG76lB9s0TDcLC0O5xGa7V63rl8O7FM
iq+sBkcEqdtkpRC2Y0LUdFj8y4w2xMI=
-----END CERTIFICATE-----
Generated at Wed May 13 14:50:55 2026 by rpki-client